Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133342e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3133342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          uqD2eDC6CC9W1GPk+TokFBHyyJ69F8DgA9MEOUv+r9E=
Subject key identifier:   A8:07:F4:37:39:40:30:A8:33:DE:EB:D3:8D:72:82:C3:90:77:DE:C6
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       4D9C686E4D05DCDA71B31F44C62EC80F34D00E81
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:59 +0000
ROA not before:           Thu 28 Mar 2024 17:36:59 +0000
ROA not after:            Thu 27 Mar 2025 17:41:59 +0000
asID:                     11921
IP address blocks:        200.150.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9c:68:6e:4d:05:dc:da:71:b3:1f:44:c6:2e:c8:0f:34:d0:0e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:59 2024 GMT
            Not After : Mar 27 17:41:59 2025 GMT
        Subject: CN=A807F437394030A833DEEBD38D7282C39077DEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:35:8c:4f:86:e9:4f:b5:ba:67:4c:99:cf:
                    34:ef:96:3d:78:1b:7a:2d:39:bc:99:2f:20:39:b4:
                    a0:cb:a7:9d:e7:48:ce:91:20:04:51:8a:5e:42:34:
                    c7:23:7a:f4:c6:3b:8a:ce:97:2b:7e:54:ed:d6:aa:
                    2b:e6:ed:d5:5c:23:4f:23:71:5f:00:50:d1:1b:db:
                    cf:2c:3c:b3:cb:92:02:bb:91:8c:7c:a4:dd:2b:27:
                    4f:ad:a5:1c:70:df:63:78:01:53:80:52:77:f5:1c:
                    9b:4b:d2:d1:a5:0a:9a:5c:ca:f1:6f:5d:0a:9d:de:
                    3a:82:e3:05:5a:19:3f:b5:68:56:a2:52:73:61:41:
                    c5:f5:8d:46:e5:81:24:26:74:2f:c3:7b:40:a6:fa:
                    c0:95:db:21:66:67:68:58:f3:a8:f5:b3:ff:f8:52:
                    cd:58:e3:56:32:db:7c:41:29:24:92:0e:c3:9c:55:
                    fd:a8:d2:2b:16:3e:d8:64:ef:5c:36:aa:29:29:6f:
                    09:ce:2a:21:3e:ab:62:dd:e0:ef:8a:09:dc:20:7a:
                    e2:4a:b0:f8:96:96:fb:9f:e3:12:2b:86:b3:f8:47:
                    20:a7:e5:07:ee:e6:57:68:e5:aa:0e:9c:24:5b:9e:
                    ab:06:9f:e2:da:09:f4:81:17:bc:75:13:ec:94:ad:
                    bb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:07:F4:37:39:40:30:A8:33:DE:EB:D3:8D:72:82:C3:90:77:DE:C6
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:cf:84:51:73:48:5a:74:1d:ac:f5:8d:0d:0f:4d:5c:c7:60:
         7c:b7:82:d6:b4:78:9e:c6:51:a1:c6:9f:dd:16:51:11:5b:b6:
         8a:f1:8e:d6:69:d5:09:0f:46:27:50:2f:ea:19:ec:5f:f7:02:
         13:68:4e:30:21:15:b2:70:d2:8a:f2:b3:b6:d1:5b:3b:38:78:
         e9:37:7f:2b:8c:09:0e:51:55:fd:fa:6d:42:31:f7:fd:ec:2f:
         99:35:7b:ea:1b:d1:58:4f:5c:7c:56:f8:66:3c:c3:e3:87:75:
         e2:e6:fc:a9:c5:64:b2:44:b7:57:15:0e:b7:37:f9:6c:3c:e1:
         32:d3:7b:27:b7:4d:e1:5a:21:e7:f5:3e:69:77:af:e7:ca:43:
         f4:8b:0f:1c:2e:5e:24:25:bb:0f:bb:c6:11:02:c6:c1:39:dc:
         9e:14:a7:69:37:e7:f8:45:42:32:f2:26:b2:2b:31:2e:b3:ec:
         d9:76:b3:b5:4f:1b:49:88:d1:41:ff:61:d5:57:90:54:20:36:
         88:30:a0:1a:3a:98:4b:c9:48:bd:f0:9f:71:78:a0:30:37:16:
         50:2c:20:2e:52:7c:c4:79:6a:55:68:61:1d:a9:3d:b0:f7:32:
         87:9f:46:e4:b9:6c:ef:1b:a0:4c:74:2f:5c:59:fd:20:82:a6:
         aa:55:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org